Bomb threat emails demanding bitcoin forced evacuations at Hyundai offices, highlighting a growing wave of crypto-linked extortion threats in South Korea.
On December 19, South Korea’s Hyundai Group faced a serious security scare that set off alarms across the nation. Employees were evacuated from major offices in Seoul following a bomb threat email demanding payment in Bitcoin. Authorities later confirmed that the threat was a hoax, but the incident served to amplify concerns about a disturbing trend of digital extortion targeting large corporations.
Hyundai Offices Evacuated After Bitcoin Ransom Threat
According to police reports, a threatening email was sent to Hyundai Group claiming a bomb would detonate at the Yeonji-dong headquarters at 11:30 a.m. The message escalated the threats by stating that a second bomb would explode at the Hyundai Motor Group’s Yangjae-dong office. The sender demanded a ransom of 13 bitcoins, which, at the time, amounted to roughly $1.1 million.
South Korea’s Hyundai Group and Hyundai Motor Group offices in Seoul received bomb threat emails demanding 13 BTC on Dec. 19, with the sender threatening further attacks if unpaid. Police deployed special forces and found no explosives; similar threats have recently targeted…
— Wu Blockchain (@WuBlockchain) December 19, 2025
In response to the threat, police deployed special forces, who conducted thorough searches of both buildings involved. Luckily, no explosives or suspicious items were found. Nonetheless, the authorities assessed the threat as having low credibility. Hyundai Group took precautionary measures by evacuating employees from offices in Jongno-gu and Seocho-gu, temporarily interrupting business operations.
Investigators are currently tracing the origins of the email and exploring any connections to previous threats. To date, no suspects have been publicly identified.
Wave of Hoax Threats Raises Security Concerns
This incident is far from isolated; South Korea has recently witnessed a surge in similar threats. Just one day prior, a post on Kakao’s customer service board threatened to bomb Samsung Electronics’ headquarters, including violent references against its chairman. Earlier that week, KT’s Bundang office also received a bomb threat, leading to emergency evacuations, while similar warnings targeted Kakao’s Jeju headquarters and Pangyo office, along with Naver offices.
Authorities have begun to suspect that these incidents form a pattern, blending digital platforms with offline intimidation tactics. Although no explosives have been discovered in any of the cases, public anxiety continues to mount. Each alert necessitates a costly emergency response, prompting law enforcement to leverage resources efficiently.
Ongoing investigations involve various police units working in tandem, including cybercrime and counter-terrorism units. As officials point out, while the anonymity of digital threats makes tracing them challenging, every report is taken with the utmost seriousness.
Beyond immediate security concerns, these incidents illustrate how extortion tactics are evolving. An increasing number of criminals are referencing cryptocurrencies in their ransom demands. Bitcoin’s wide reach in the global market makes it a popular choice for such schemes. However, authorities also emphasize that blockchain transactions can be traced, raising questions about the efficacy of these tactics.
The Hyundai incident underscores broader cybersecurity issues for corporations. Although the attack originated externally, companies face persistent threats to their reputations and operations. As a result, many organizations are reevaluating their threat response protocols, often increasing collaboration with law enforcement agencies.
Meanwhile, South Korean lawmakers are contemplating policy responses to these alarming trends. Discussions are underway regarding the implementation of harsher penalties for crypto-related crimes, alongside efforts to enhance monitoring and enforcement frameworks. These initiatives could gain substantial traction by mid-2026, as officials grapple with the implications of such threats on public safety and corporate security.
